Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa
File: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (raw, json)
Hash identifier: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=
Subject key identifier: EA:9A:47:D1:34:D8:87:37:CB:CC:75:77:C5:2C:E5:E0:B4:9D:57:A7
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 019421440383B1CFB34F878DB165628288F5
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215514
IP address blocks: 2001:67c:de4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:03:83:b1:cf:b3:4f:87:8d:b1:65:62:82:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea9a47d134d88737cbcc7577c52ce5e0b49d57a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:1d:e4:8a:79:78:0e:7e:2a:74:4c:ca:82:
f2:f0:16:99:05:46:b7:99:5f:ab:d1:ef:bf:4d:a9:
0e:52:c7:e1:4a:67:a6:89:bf:39:6f:cd:52:6b:4d:
a4:2e:99:a2:5b:94:be:dc:42:78:41:23:62:cd:4b:
6f:2a:a4:e7:e8:a2:e5:0f:4c:66:33:2c:5d:12:65:
eb:a8:be:06:c0:65:0c:61:43:92:31:a5:c6:e1:cc:
c0:06:e9:aa:91:d1:27:d2:8f:2f:ac:a0:70:bc:ab:
ba:70:c7:da:fd:93:c2:ce:6e:75:11:bc:3c:2a:f8:
36:f3:5b:87:fc:df:ea:82:11:25:71:f0:9a:4e:72:
4a:ac:d5:d8:34:6f:c4:ea:87:98:19:46:88:f7:6d:
ed:81:f7:84:1e:01:9a:bd:49:2d:eb:7c:b0:82:67:
ce:50:b1:1f:a2:eb:66:2c:f2:6d:07:40:b3:dd:cd:
d1:cd:91:5d:49:1e:fb:bb:d1:7c:e0:7b:da:96:f9:
e7:b9:0d:3e:61:06:39:70:78:98:7e:1f:f3:e4:70:
fb:18:9e:de:21:62:b7:b8:6d:10:d6:df:e4:75:14:
ce:c1:f1:8d:26:55:55:4f:73:2e:47:0d:5c:c1:dd:
7f:80:fd:e7:0a:a8:72:04:cf:9f:00:4c:22:cc:16:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:47:D1:34:D8:87:37:CB:CC:75:77:C5:2C:E5:E0:B4:9D:57:A7
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:de4::/48
Signature Algorithm: sha256WithRSAEncryption
54:0f:f5:92:43:0a:08:64:f3:9c:3e:4d:96:1c:e7:18:d8:23:
12:86:5e:b3:86:67:7c:85:00:e0:29:f3:fb:9c:b8:a0:3a:1e:
6b:ce:7a:02:d8:de:fe:1b:e8:99:c1:21:31:b5:76:7a:b6:f7:
f7:b1:46:13:a9:92:ca:0a:bd:ea:5f:c1:dd:9f:2b:45:41:4a:
7f:6a:7d:9b:e4:be:70:a2:68:18:c1:43:6b:05:34:3e:ea:70:
f2:39:e9:29:1f:14:cc:dc:a7:a0:57:0d:ee:aa:12:60:37:0c:
94:1e:86:1c:9a:84:d4:2f:f6:05:63:13:c0:08:f9:c2:42:2f:
e3:69:3c:7a:26:af:2c:d8:ff:27:64:58:c2:85:56:02:0b:34:
3f:30:0e:93:69:ff:7e:bc:88:be:1e:18:80:3e:8e:89:53:3a:
64:d9:8a:f2:88:40:c5:8f:44:88:d5:5c:7b:b2:4e:5f:94:af:
88:28:a6:4f:4f:0e:70:ad:5e:98:53:95:48:78:97:d1:e6:8a:
d5:93:9d:2a:98:7c:d6:ff:28:53:b8:51:c7:0c:86:95:fe:31:
7c:91:02:55:86:bb:72:89:5f:30:3e:dc:ed:3c:4b:ed:d7:96:
90:c5:ba:5e:f9:86:c6:fc:ef:86:be:b3:fa:10:7e:52:25:07:
42:28:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:42:31 2025 by rpki-client